A "new s3 bucket to download something on the internet" is way too broad of a need. What sort of thing, and how do they need to download it? Solutions could v

A "new s3 bucket to download something on the internet" is way too broad of a need. What sort of thing, and how do they need to download it? Solutions could vary as much as setting up Cloudfront for static data, or an API that vends out presigned s3 links. I'm partial to the presigned links, as you can time limit them and don't necessarily have to shuffle things around on where the data is stored. (A moot point for fully dynamic content stored in a database, of course. That has to be shuffled to a shape for the customer.) That all said, being a Microsoft shop is a huge elephant that probably shouldn't be ignored.